Fetching from the wire…
Security2026-06-08 · source-backed
Meta confirmed a flaw in its AI-assisted account-recovery chatbot let attackers hijack at least 20,225 accounts between April 17 and early June. Ask the bot to change an account's email, and it fired a password-reset link to an unverified address. Meta only noticed on May 31 after high-profile takeovers including a Space Force official and Sephora. This is the cleanest cautionary tale of the year. Never wire an LLM agent to a privileged action like account recovery without a separate, hard identity-verification path. Agent convenience created a bypass that ran for seven weeks before anyone caught it.
Each link below shares sources, entities, or timing with this story.
A Tech Transparency Project investigation reported by WIRED found more than 50 image and video ads published across Facebook, Instagram, Messenger and Threads between November 2025 and early August 2026, with at least one reaching over 2,500 accounts in Europe. Several linked...
The models are good. The license is the real story. Google released Gemma 4 on April 2 with four variants: E2B, E4B, 26B MoE, and 31B Dense. All built on the Gemini 3 architecture. The 31B Dense variant claimed #3 on Arena AI's text leaderboard, beating models 20x its size. Th...
The Natrium design delivers 345 MW baseload and ramps to 500 MW for over five hours using integrated molten salt thermal storage, roughly 45% above baseload without burning more fuel. That load-following profile is what datacenter operators actually need, and it's the pitch be...
Hard deadline. Back up by 07:59 SGT on August 23, 2026, or lose it. Manus posted on August 11 that it will "soon return to operating as an independent company," reversing the Meta acquisition that closed December 29, 2025, citing regulatory requirements in specific jurisdictio...
For about a year, "run your agent locally" meant accepting a model that couldn't reliably call a tool twice in a row. That excuse is gone. Meta Superintelligence Labs published Muse Glimmer today: a 29.6B dense causal transformer, 52 layers, 6,656 hidden dim, with a ~1.8B ViT-...
Go look at your ~/.claude/CLAUDE.md right now. Mine has internal package names, a build command with a host in it, and notes about which credentials live where. I wrote it assuming exactly one reader. RuntimeWire published traced request captures on August 9 showing Muse Code...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.